Static task
static1
Behavioral task
behavioral1
Sample
939dbe8904b0e97780e2b2de6c5b6a6f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
939dbe8904b0e97780e2b2de6c5b6a6f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
939dbe8904b0e97780e2b2de6c5b6a6f_JaffaCakes118
-
Size
612KB
-
MD5
939dbe8904b0e97780e2b2de6c5b6a6f
-
SHA1
b0a6220b5694efe4e7f95c3050c77d4d07083538
-
SHA256
84adc9a5bf5fe6e88016705a8c08a04c0916e31199c5c29a76c3abef3d01aade
-
SHA512
2f52a665fe0af969b2ad90e9e4d4e8c176536abc841b949866bd1e9b154b7c3611ac72970575968e3b2a2fd91489687253f3abf24ece41cd3631161c73e560bf
-
SSDEEP
12288:3NthwrT9UYMfEdfBzz5NntjwyaL62xQqSQ:vqdXhzXBPaL6yQB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 939dbe8904b0e97780e2b2de6c5b6a6f_JaffaCakes118
Files
-
939dbe8904b0e97780e2b2de6c5b6a6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 476KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE